Progress Software issues Telerik security updates across five products
Fixed releases exist for Telerik reporting and interface components used to build .NET applications. Teams shipping apps with older versions are affected.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
Progress Software disclosed vulnerabilities in its Telerik line as of November 12, 2026. The affected products are Telerik Report Server before 12.3.26.1110 and Telerik Reporting before 20.3.26.1110. [1]
Telerik UI for ASP.NET Core is affected before 2026.3.1015, Telerik UI for WPF before 2026.4.1110, and Telerik UI for WinForms before 2026.4.1111. [1]
The post does not describe the individual flaws or say whether any are exploited. Administrators are encouraged to review the vendor's advisory links and apply the updates. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
Progress Software security advisory (AV26-1148)